Best tools to analyze suspicious traffic on ubuntu 18.04 VPS?

Question

Traffic analysis

What tools exist (for windows user or web interface) for visually improved traffic analysis by ip and domain on ubuntu 18.04 VPS?


On October 25, traffic increased, but the sites (wprdpress) are all (a dozen) under the stub. I would like to know who exactly is so diligent in contacting the sites (website). I would like a tool for windows. I was prompted by Web Log Explorer, but somehow I did not understand how to slip the logs (and which ones) of Ubuntu to him. I hope you can help the teapot.

Answer 1

For one-time or periodic measurements/visualizations - goaccess , including console realtime mode.

Answer 2

If it's behind a stub, have you blocked all IPs except the stub ones? Use tcpdump or iftop